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1 This action is in response to the communication filed on 6/6/2005. 

2 Continued Examination Under 3 7 CFR LI 14 

3 A request for continued examination under 37 CFR 1.114, including the fee set forth in 

4 37 CFR 1- 17(e), was filed in this application after final rejection. Since this application is 

5 eligible for continued examination under 37 CFR 1.114, and the fee set forth in 37 CFR 1 . 17(e) 

6 has been timely paid, the finality of the previous Office action has been withdrawn pursuant to 

7 37 CFR 1.114. Applicant's submission filed on 6/6/2005 has been entered. 

8 Response to Arguments 

9 Applicant's arguments filed 6/6/2005 have been fully considered but they are not 

10 persuasive. Applicant argues primarily that: 

1 1 a. Patel does not disclose a "C-bit exponent". 

12 b. Patel disclosed outputting the lower n-co(log n) bits, 

13 c. Patel disclosed the generator "result" is n bits long. 

14 d. Patel disclosed that in the preferred embodiment, the exponent was the entire 

15 result of the previous iteration, and not "C-bits" of the result. 

16 e. Section 5.1 was merely a proof of security section and not a Patel' s algorithm. 

1 7 f Patel referred to the size of the exponents as "large" in section 7.1. 

1 8 g. Patel teaches against using short exponents. 
19 

20 The examiner notes the applicant's use of "result" to indicate the whole output of the bit 

21 generator, and the use of "output" to refer to the portion actually used by Patel as pseudo-random 

22 bits and will use the same terminology for consistency. 
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1 Regarding applicant's argument a., that Patel does not disclose a "C-bit exponent", the 

2 examiner does not find the argument persuasive. This is due to the following reason, as well as 

3 the responses to applicant's arguments b-g. Patel states on page 307 Section 2.1 Lines 1-2 that 

4 ''for efficiency purposes the exponent x is sometimes restricted to c bits (e.g. ^=^128 or 160 bits) 

5 since this requires fewer multiplications,'' Patel goes on to state in lines 1-3 of the following 

6 paragraph that ''we will also restrict x, in particular, we will restrict it to be slightly greater than 
1 O(log n) bits, hut not to save on multiplications. The size of the exponent will be denoted 

8 o)(log n) '\ Quite clearly, Patel disclosed that the exponent 'x' would be restricted to "c bits" 

9 denoted "co(log n)". As such, the examiner does not find the argument persuasive, 

10 Regarding applicant's argument b., that Patel disclosed outputting the lower n- co(log n) 

1 1 bits, the examiner is unclear as to what this argument was meant to show considering that the 

12 argument does not reflect on the size of the exponent of Patel. However, the examiner agrees 

13 that in one embodiment, Patel disclosed outputting n - co(log n) [or 'c'] pseudo-random bits. As 

14 such, the examiner does not find the argument persuasive. 

1 5 Regarding applicant's argument c, that Patel disclosed that the generator result is 'n' bits 

16 long, the examiner has considered the argument and does not find the argument persuasive. 

17 Again, the examiner is unclear as to what this argument was meant to show, considering that the 

1 8 argument does not reflect on the size of the exponent of Patel. As such, the examiner does not 

19 find the argument persuasive. 

20 Regarding applicant's argument d., that Patel disclosed that the entire result of the 

21 previous iteration was used as the exponent, the examiner has considered the argument and does 

22 not find the argument persuasive. Although Patel did disclose the use of the entire result as the 
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1 exponent for the next iteration, this was merely the preferred embodiment of Patel. As discussed 

2 above with regards to argument a., Patel clearly disclosed, at least for one embodiment, limiting 

3 the exponent to co(log n) bits, or c bits. See MPEP Section 2123 

4 PA TENTS ARE RELEVANT AS PRIOR ART FOR ALL THEY CONTAIN 

5 ''The use of patents as references is not limited to what the patentees describe as their own 

6 inventions or to the problems with which they are concerned. They are part of the literature of the 
1 art, relevant for all they contain, " In re Heck 699 R2d 1331, 1332-33, 216 USPQ 1038, 1039 

8 (Fed dr. 1983) (quoting In re Lemelson, 397 F2d 1006, 1009, 158 USPQ 275, 277 (CCPA 

9 1968)). 

10 A reference may be relied upon for all that it would have reasonably suggested to one having 

1 1 ordinary skill the art, including nonpreferred embodiments. Merck & Co. v. Biocraft Laboratories, 

12 874 F2d804, 10 USPQ2d 1843 (Fed Cir.), cert, denied, 493 U.S 975 (1989). See also Celeritas 

13 Technologies Ltd v. Rockwell International Corp., 150 F.3d 1354, 1361, 47 USPQ2d 1516, 1522- 

14 23 (Fed, Cir, 1998) (The court held that the prior art anticipated the claims even though it taught 

1 5 away from the claimed invention. ''The fact that a modem with a single carrier data signal is 

1 6 shown to be less than optimal does not vitiate the fact that it is disclosed. "). NONPREFERRED 

1 7 EMBODIMENTS CONSTITUTE PRIOR ART 

1 8 Disclosed examples and preferred embodiments do not constitute a teaching away from 

19 a broader disclosure or nonpreferred embodiments. In re Susi, 440 F,2d 442, 169 USPQ 

20 423 (CCPA 1971). 'A known or obvious composition does not become patentable simply 

2 1 because it has been described as somewhat inferior to some other product for the same 

22 use. " In re Gurley, 27F.3d55l 554, 31 USPQ2d 1130, 1132 (Fed. Cir. 1994) (The 

23 invention was directed to an epoxy impregnated fiber-reinforced printed circuit material. 

24 The applied prior art reference taught a printed circuit material similar to that of the 

25 claims but impregnated with polyester-imide resin instead of epoxy. The reference, 

26 however, disclosed that epoxy was known for this use, but that epoxy impregnated circuit 
11 boards have ''relatively acceptable dimensional stability'' and ''some degree of 

28 flexibility, " but are inferior to circuit boards impregnated with polyester-imide resins. The 

29 court upheld the rejection concluding that applicant 's argument that the reference teaches 

30 away from using epoxy was insufficient to overcome the rejection since "Gurley asserted 

3 1 no discovery beyond what was known in the art. " 27 F.3d at 554, 31 USPQ2d at 1132.). 
32 

33 As such, because Patel disclosed the use of "short exponents", Patel meets the Umitations of the 

34 claims. As such, the examiner does not find the arguments persuasive. 

35 With regards to applicant's argument e., that section 5.1 was merely a proof of security 

36 section and not part of the algorithm, the examiner has considered the argument and does not 

37 find the argument persuasive. See MPEP Section 2122 
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UTILITY NEED NOT BE DISCLOSED IN REFERENCE 



2 
3 
4 
5 
6 
7 
8 
9 
10 



In order to constitute anticipatory prior art, a reference must identically disclose the claimed 
compound, but no utility need be disclosed by the reference. In re Schoenwald, 964 K 2d 1122, 22 
USPQ2d 1671 (Fed, Cir. 1992) (The application claimed compounds used in ophthalmic 
compositions to treat dry eye syndrome. The examiner found a printed publication which disclosed 
the claimed compound hut did not disclose a use for the compound. The court found that the claim 
was anticipated since the compound and a process of making it was taught by the reference. The 
court explained that ''no utility need be disclosed for a reference to be anticipatory of a claim to an 
old compound. 964 F.2dat 1124, 22 USPQ2d at 1673. It is enough that the claimed compound is 
taught by the reference.). 



11 



12 As such, simply because section 5. 1 deals with proving the security of the system, does not mean 

13 that the section is irrelevant. Section 5. 1, is a section proving the security of the algorithm of 

14 section 5. As recited on page 16 Lines 13-18, Patel disclosed using short exponents as the 

15 exponents for the system. Further, as discussed above with regards to argument a., Patel clearly 

16 disclosed limiting the exponent to a short exponent. As such, the examiner does not find the 

17 argument persuasive. 

18 Regarding the applicant's argument f , that Patel referred to the size of the exponents as 

19 "large" in section 7. 1, the examiner has considered the argument and does not find the argument 

20 persuasive. The claims do not recite that the exponents are not large, only that they are shorter 

21 than the generated result. As discussed above, in one embodiment the exponent is a short 

22 exponent and as such the examiner does not find the argument persuasive. 

23 Regarding the appUcant's argument g., that Patel teaches against using short exponents, 

24 the examiner has considered the argument and does not find it persuasive. As discussed above, 

25 Patel clearly disclosed using short exponents in the system. Simply because Patel gives 

26 disadvantages to using short exponents does not take away from the fact that Patel previously 

27 disclosed the use of short exponents, and therefore met the limitations of the claims. 

28 Furthermore, see MPEP Section 2121 
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1 PRIOR ART IS PRESUMED TO BE OPERABLE/ ENABLING 

2 When the reference relied on expressly anticipates or makes obvious all of the elements of the 

3 claimed invention, the reference is presumed to be operable. Once such a reference is found, the 

4 burden is on applicant to provide facts rebutting the presumption of operability. In re Sasse, 629 

5 R2d 675, 207 USPQ 107 (CCPA 1980). See also MPEP § 716.07, 

6 Because the arguments have not been found persuasive, the examiner is maintaining the 

7 102 rejections in view of Patel as set forth below. 

8 DETAILED ACTION 

9 All rejections and objections not set forth below have been withdrawn. 

10 Claims 1-2, 6-7, 9-14, 18-19, 21-26, 30-32, 34-37, 39-40, 44-45, and 47 have been examined. 

1 1 Claims 3-5, 8, 15-17, 20, 27-29, 33, 38, 41-43, and 46 have been cancelled. 

12 Title 

13 The title as amended is acceptable. 

14 Claim Rejections - 35 USC § 112 

15 The following is a quotation of the second paragraph of 35 U.S.C. 1 12: 

1 6 The specification shall conclude with one or more claims particularly pointing out and distinctly claiming the 

1 7 subject matter which the applicant regards as his invention. 

18 

19 Claims 1-2, 6-7, 9-14, 18-19, 21-26, 30-32, 34-37, 39-40, 44-45, and 47 are rejected 

20 under 35 U.S.C. 112, second paragraph, as being indefinite for failing to particularly point out 

21 and distinctly claim the subject matter which applicant regards as the invention. 

22 The term "substantially" in claims 1,13, 25, and 39 is a relative term which renders the 

23 claim indefinite. The term "substantially" is not defined by the claim, the specification does not 

24 provide a standard for ascertaining the requisite degree, and one of ordinary skill in the art would 

25 not be reasonably apprised of the scope of the invention. One of ordinary skill in the art would 

26 be unable to determine how much shorter a length of the input would have to be in order to be 
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1 considered substantially shorter than a length of the generated output. As such, the recitation of 

2 "substantially" in this claim would cause the ordinary person to be unable to determine the scope 

3 of the claim, and as such the claims is rejected for failing to particularly point out and distinctly 

4 claim the subject matter which the applicant regards as the invention. 

5 Claims 1, 13, 25, and 39 recite the limitations "wherein a length in bits, C, of the input" 

6 and "a length in bits, N, of the generated output". It is unclear from the claim whether "a length" 

7 is meant as "a portion of the input/output" (i.e. the first 10 bits of the input) or whether it is 

8 meant as "the total number of bits in the input/output". As such, the ordinary person skilled in 

9 the art would be unable to determine the scope of the claim. Therefore, the claims is rejected for 

10 failing to particularly point out and distinctly claim the subject matter which the applicant 

1 1 regards as the invention. 

12 Any claim not specifically addressed above is rejected by virtue of its dependency from 

13 one of the rejected independent claims. 

1 4 Claim Rejections - 35 USC §102 

15 The following is a quotation of the appropriate paragraphs of 35 U.S. C. 102 that form the basis 

1 6 for the rejections under this section made in this Office action: 

1 7 A person shall be entitled to a patent unless - 

18 (b) the invention was patented or described in a printed publication in this or a foreign 

19 country or in public use or on sale in this country, more than one year prior to the date 

20 of application for patent in the United States. 
21 

22 Claims 13-14, 18-19, 21-22, 24-26, 30-32, 34-35, 37, 39-40, 44-45, and 47 are rejected 

23 under 35 U.S.C. 102(b) as being anticipated by Patel et al ("An Efficient Discrete Log Pseudo 

24 Random Generator") hereinafter referred to as Patel. 
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1 Regarding claim 13, Patel disclosed a system for efficiently generating pseudo-random 

2 bits in a computing environment, comprising: means for providing an input value (See Patel 

3 Page 313 Section 5 Line 10); means for generating an output sequence of pseudo-random bits 

4 (See Patel Page 313 Section 5 Lines 11-12) using the provided input value as an exponent of a 1- 

5 way function comprising modular exponentiation modulo a safe prime number (See Patel Page 

6 313 Section 5 Line 10 wherein the function Xi+i = g''' mod p is one-way and Page 307 Paragraph 

7 6 Lines 7-8) wherein a length in bits, C (See Patel Page 307 Section 2.1 Paragraphs 1-2, (jo(log 

8 n)), of the input value is substantially shorter than a length in bits, N (See Section 5 Lines 9-10, 

9 Xi+i), of the generated output sequence (See Patel Page 307 Problem 2) and a base of the modular 

10 exponentiation is a fixed generator value (See Patel Page 304 Section 1 Lines 3-4), and means 

1 1 for using C selected bits of the generated output sequence as the provided input value for the 

12 next iteration of the means for generating (See Patel Page 307 Section 2. 1 Paragraphs 1-2 and 

13 Patel Page 316 Lines 9-10) while using all N-C remaining bits of the generated output sequence 

14 as pseudo-random output bits (See Patel Page 316 Lines 5-6), until a desired number of pseudo- 

15 random output bits have been generated (See Patel section 5 Lines 9-11, wherein the feedback is 

1 6 performed for all i>0). 

17 Regarding claim 25, Patel disclosed a method for efficiently generating pseudo-random 

18 bits, comprising: providing an input value (See Patel Page 313 Section 5 Line 10); generating an 

19 output sequence of pseudo-random bits (See Patel Page 313 Section 5 Lines 11-12) using the 

20 provided input value as an exponent of a 1-way function comprising modular exponentiation 

21 modulo a safe prime number (See Patel Page 313 Section 5 Line 10 wherein the function Xi+i = 

22 g'^' mod p is one-way and Page 307 Paragraph 6 Lines 7-8) wherein a length in bits, C (See Patel 
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1 Page 307 Section 2.1 Paragraphs 1-2, co(log n)), of the input value is substantially shorter than a 

2 length in bits, N (See Section 5 Lines 9-10, Xi+i), of the generated output sequence (See Patel 

3 Page 307 Problem 2) and a base of the modular exponentiation is a fixed generator value (See 

4 Patel Page 304 Section 1 Lines 3-4), and means for using C selected bits of the generated output 

5 sequence as the provided input value for the next iteration of the means for generating (See Patel 

6 Page 307 Section 2.1 Paragraphs 1-2 and Patel Page 316 Lines 9-10) while using all N-C 

7 remaining bits of the generated output sequence as pseudo-random output bits (See Patel Page 

8 316 Lines 5-6), until a desired number of pseudo-random output bits have been generated (See 

9 Patel section 5 Lines 9-11, wherein the feedback is performed for all i>0). 

10 Regarding claim 39, Patel disclosed an encryption system, comprising: means for 

1 1 providing an input value (See Patel Page 313 Section 5 Line 10); means for generating an output 

12 sequence of pseudo-random bits (See Patel Page 313 Section 5 Lines 11-12) using the provided 

13 input value as an exponent of a 1-way function comprising modular exponentiation modulo a 

14 safe prime number (See Patel Page 313 Section 5 Line 10 wherein the function Xi+i = g^* mod p is 

15 one-way and Page 307 Paragraph 6 Lines 7-8) wherein a length in bits, C (See Patel Page 307 

16 Section 2. 1 Paragraphs 1-2, a)(log n)), of the input value is substantially shorter than a length in 

17 bits, N (See Section 5 Lines 9-10, Xi+i), of the generated output sequence (See Patel Page 307 

18 Problem 2) and a base of the modular exponentiation is a fixed generator value (See Patel Page 

19 304 Section 1 Lines 3-4), and means for using C selected bits of the generated output sequence 

20 as the provided input value for the next iteration of the means for generating (See Patel Page 307 

21 Section 2. 1 Paragraphs 1-2 and Patel Page 316 Lines 9-10) while using all N-C remaining bits of 

22 the generated output sequence as pseudo-random output bits (See Patel Page 316 Lines 5-6), 
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1 until a desired number of pseudo-random output bits have been generated (See Patel section 5 

2 Lines 9-11, wherein the feedback is performed for all i>0); and means for using the desired 

3 number of generated pseudo-random bits as input to an encryption operation (See Patel Page 305 

4 Lines 15-17). 

5 Regarding claims 14, 26, and 40, Patel disclosed that the 1-way function is based upon an 

6 assumption known as "the discrete logarithm with short exponent" assumption (See Patel Page 

7 307 Section 2.1). 

8 Regarding claims 18, 30, and 44, Patel disclosed that the length of the input value is 160 

9 bits (See Patel Section 2. 1 Lines 1-2 wherein x is the input of 160 bits) and a length of the safe 

10 prime number is 1024 bits (See Patel Page 307 Lines 5-6). 

1 1 Regarding claims 19, 3 1, 32, and 45, Patel disclosed that the length of the input value is 

12 at least 160 bits (See Patel Section 2. 1 Lines 1-2 wherein x is the input of 160 bits) and the " 

13 length of the generated output sequence is at least 1024 bits (See Patel Abstract Lines 11-13 

14 wherein n is the number of bits output by the generator prior to bit extraction as disclosed by 

15 Patel in Section 6). 

16 Regarding claims 21, 34, and 47, Patel disclosed that the N - C remaining bits are 

17 concatenated to pseudo-random output bits previously generated by the means for generating 

1 8 (See Patel Abstract and Section 7.1). 

19 Regarding claims 22, and 35, Patel disclosed that the N - C remaining bits are selected 

20 from the N bits of the generated output sequence as a contiguous group of bits (See Patel Section 

21 7.1 Lines 3-4). 
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1 Regarding claims 24, and 37, Patel disclosed means for using the desired number of 

2 generated pseudo-random output bits as input to an encryption operation (See Patel Page 305 

3 Lines 15-17). 

4 Claim Rejections - 35 USC §103 

5 The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 

6 obviousness rejections set forth in this Office action: 

7 A patent may not be obtained though the invention is not identically disclosed or 

8 described as set forth in section 102 of this title, if the differences between the subject 

9 matter sought to be patented and the prior art are such that the subject matter as a 

10 whole would have been obvious at the time the invention was made to a person having 

11 ordinary skill in the art to which said subject matter pertains. Patentability shall not be 

1 2 negatived by the manner in which the invention was made. 
13 

14 Claims 1-2, 6-7, 9-12, 23, and 36 are rejected under 35 U.S.C. 103(a) as being 

15 unpatentable over Patel as applied to claims 13 and 25 respectively above, and further in view of 

1 6 Schneier ("Applied Cryptography"). 

17 Patel disclosed a system for efficiently generating pseudo-random bits in a computing 

18 environment, comprising: means for providing an input value; means for generating an output 

19 sequence of pseudo-random bits using the provided input value as an exponent of a 1-way 

20 function comprising modular exponentiation modulo a safe prime number wherein a length in 

21 bits, C, of the input value is substantially shorter than a length in bits, N, of the generated output 

22 sequence and a base of the modular exponentiation is a fixed generator value and means for 

23 using C selected bits of the generated output sequence as the provided input value for the next 

24 iteration of the means for generating while using all N-C remaining bits of the generated output 

25 sequence as pseudo-random output bits, until a desired number of pseudo-random output bits 
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1 have been generated (See rejection of claim 13 above), but Patel failed to disclose that this 

2 system was implemented in software, and further failed to disclose that the input comprised non- 

3 contiguous bits of the previous output. However, Patel did disclose that these pseudo-random 

4 bits were for encryption (See Patel Page 305 Lines 15-17). 

5 Schneier teaches that any encryption algorithm can be implemented in software and that 

6 doing so helps with flexibility and portability, ease of use, and ease of upgrade (See Schneier 

7 Page 225 Paragraph 7 Lines 1-3). Schneier fijrther teaches that software encryption programs 

8 are popular (See Schneier Page 225 Paragraph 8 Line 1). Schneier also teaches that in order to 

9 reach a maximal period for a pseudo-random bit generator, the feedback bits should be a 

10 primitive polynomial mod 2 (See Schneier Page 374 lines 9-20, and fijrther shows an example of 

1 1 this type of feedback (See Schneier Page 375 Figure 16.4). 

12 It would have been obvious to the ordinary person skilled in the art at the time of 

13 invention to employ the teachings of Schneier to the pseudo-random bit generator of Patel, by 

14 implementing the generator in software, and by providing primitive polynomial mod 2 feedback 

1 5 to the generator. This would have been obvious because the ordinary person skilled in the art 

16 would have been motivated to improve the portability, ease of use, and ease of upgrade of the 

1 7 generator, and to provide the longest period for the generator to ensure the most produced bits 

1 8 before cycling. 

19 Claims 2, 6-7, 9-10, and 12 are rejected for the same reasons as claim 14, 18-19, 21-22, 

20 and 24 above, as appHed to claim 1. 

21 Conclusion 

22 Claims 1-7, 9-19, 21-32, 34-37, 39-45, and 47 have been rejected. 



Application/Control Number; 09/753,727 Page 13 

Art Unit: 2131 

1 The prior art made of record and not relied upon is considered pertinent to applicant's 

2 disclosure. 

3 Patel et al (U.S. Patent Number 6,285,761) disclosed a pseudo-random bit generator 

4 based on the assumption known as "discrete logarithms with short exponents". 

5 Any inquiry concerning this communication or earlier communications from the 

6 examiner should be directed to Matthew T. Henning whose telephone number is (571) 272-3790. 

7 The examiner can normally be reached on M-F 8-4. 

8 If attempts to reach the examiner by telephone are unsuccessful, the examiner's 

9 supervisor, Ayaz Sheikh can be reached on (571) 272-3795. The fax phone number for the 

10 organization where this application or proceeding is assigned is 571-273-8300 

1 1 Information regarding the status of an application may be obtained from the Patent 

12 Application Information Retrieval (PAIR) system. Status information for published applications 

13 may be obtained from either Private PAIR or Public PAIR. Status information for unpublished 

14 applications is available through Private PAIR only. For more information about the PAIR 

15 system, see http://pair-direct.uspto.gov. Should you have questions on access to the Private PAIR 

16 system, contact the Electronic Business Center (EBC) at 866-217-9197 (toll-free). 

17 

1 8 Matthew Henning 

19 Assistant Examiner A-'7'''^*^2U'<-/'*^^ 

20 Art Unit 2131 V ^yaZ SHEIKH 

2 1 8/3/2005 SUPERVISORY PATENT EXAMINER 

TECHW.L06YCE?rrER2100 



